SigmaHQ/rules
yt0ng f84c33d005
Known powershell scripts names for exploitation
Detects the creation of known powershell scripts for exploitation
2018-07-04 17:24:18 +02:00
..
application Change All "str" references to be "list"to mach schema update 2018-01-28 02:24:16 +03:00
apt Improved Chafer activity rule 2018-03-23 10:50:40 +01:00
linux Merge branch 'devel-sigmac' 2018-03-04 22:59:41 +01:00
network Added field names to first rules 2017-09-12 23:54:04 +02:00
proxy Rule: Pony / Fareit UA 2018-03-01 09:28:04 +01:00
web Change All "str" references to be "list"to mach schema update 2018-01-28 02:24:16 +03:00
windows Known powershell scripts names for exploitation 2018-07-04 17:24:18 +02:00